bitnamilegacy/keycloak:20.0.5 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/keycloak
bitnamilegacy/keycloak:20.0.5 resolved to cb04e49e6eb1, scanned 14 Sept 2026: 515 findings, 1 critical, 2 on KEV; deployed by 1 chart, among them clowder2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
515 distinct on this digest
Findings for digest cb04e49e6eb1 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GO-2022-1143 | stdlib | 1.18.9 |
| Low | GHSA-c69g-56f8-xwqj | netty-codec-http2 | 4.1.136.Final |
| Low | GHSA-4f53-xh3v-g8x4 | keycloak-services | 22.0.10 |
| Low | GHSA-xv6h-r36f-3gp5 | keycloak-services | 26.5.4 |
| Low | GHSA-xv6h-r36f-3gp5 | keycloak-saml-core | 26.5.4 |
| Low | GHSA-9623-mj7j-p9v4 | quarkus-vertx | 3.15.6 |
| Low | GO-2024-2599 | stdlib | 1.21.8 |
| Low | BIT-java-2023-22049 | java | 1.8.0 |
| Low | GHSA-m32f-8vh9-2hh3 | keycloak-services | no fix listed |
| Low | GHSA-33j3-g875-37rp | keycloak-services | no fix listed |
| Low | GO-2022-1038 | stdlib | 1.18.7 |
| Low | GHSA-4hx9-48xh-5mxr | keycloak-ldap-federation | 26.2.11 |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | GHSA-hjcp-jmpx-g3qm | httpclient5 | 5.6.3 |
| Low | GO-2023-1570 | stdlib | 1.19.6 |
| Low | DLA-4061-1 | libtasn1-6 | 4.16.0-2+deb11u2 |
| Low | GHSA-xvr9-35cr-46v9 | mariadb-java-client | 3.3.5 |
| Low | DSA-5391-1 | libxml2 | 2.9.10+dfsg-6.7+deb11u4 |
| Low | BIT-java-2024-21011 | java | 1.8.0 |
| Low | BIT-java-2023-22044 | java | 17.0.8 |
| Low | GO-2022-0531 | stdlib | 1.17.11 |
| Low | GO-2024-2600 | stdlib | 1.21.8 |
| Low | GHSA-38f8-5428-x5cv | netty-codec-http | 4.1.133.Final |
| Low | GHSA-xq3w-v528-46rv | netty-common | 4.1.115.Final |
| Low | GHSA-8c42-7qj2-3j46 | netty-codec-http | 4.1.137.Final |
| Low | GO-2024-2609 | stdlib | 1.21.8 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | BIT-java-2023-22045 | java | 1.8.0 |
| Low | GHSA-5jfq-x6xp-7rw2 | keycloak-services | 26.2.2 |
| Low | BIT-java-2023-22041 | java | 1.8.0 |
| Low | GO-2023-1751 | stdlib | 1.19.9 |
| Low | GO-2023-1753 | stdlib | 1.19.9 |
| Low | GHSA-r7wm-3cxj-wff9 | jackson-core | 2.18.8 |
| Low | BIT-java-2024-21068 | java | 1.8.0 |
| Low | GHSA-389x-839f-4rhx | netty-common | 4.1.118.Final |
| Low | GHSA-gvgg-2r3r-53x7 | keycloak-services | 26.0.10 |
| Low | BIT-java-2023-22036 | java | 11.0.20 |
| Low | BIT-java-2024-21138 | java | 1.8.0 |
| Low | BIT-java-2026-21933 | java | 1.8.0 |
| Low | GHSA-4mp9-239f-g9hg | netty-codec-http | 4.1.136.Final |
| Low | GHSA-cpf7-j4cf-vqx4 | keycloak-services | no fix listed |
| Low | BIT-java-2023-21937 | java | 1.8.0 |
| Low | BIT-java-2023-21938 | java | 1.8.0 |
| Low | GHSA-m4j5-5x4r-2xp9 | keycloak-services | 26.2.8 |
| Low | BIT-keycloak-2026-18573 | keycloak | 26.7.3 |
| Low | GO-2023-2041 | stdlib | 1.20.8 |
| Low | BIT-java-2026-46968 | java | 1.8.0 |
| Low | GO-2023-2043 | stdlib | 1.20.8 |
| Low | BIT-java-2024-21217 | java | 1.8.0 |
| Low | GO-2022-0515 | stdlib | 1.17.12 |